Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
File: ysNNxbjd0zsX7HVcldRdD3YlD6g.mft (raw, json)
Hash identifier: 2vuRU6wltH6npd0NqxG3XyeI+/SPxUsShhGEOfjzPVk=
Subject key identifier: D4:32:F8:ED:C4:90:09:A5:AD:BD:09:3C:16:99:0C:7D:D1:B5:88:C6
Authority key identifier: CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
Certificate issuer: /CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
Manifest number: 0190
Signing time: Fri 31 Jan 2025 02:46:22 +0000
Manifest this update: Fri 31 Jan 2025 02:46:21 +0000
Manifest next update: Fri 07 Feb 2025 02:46:21 +0000
Files and hashes: 1: ysNNxbjd0zsX7HVcldRdD3YlD6g.crl (hash: 8DkUtGuljSlPvR0RrMT/RLal0BW+dgMFfHXKCG6sWoY=)
2: E21DEF607B5E11ED98247D60C4F9AE02.roa (hash: ADnEMa2Brj1gfAu5du2mdudMmrXS7wa9cPzXrkNiEN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9B39/serialNumber=CAC34DC5B8DDD33B17EC755C95D45D0F76250FA8
Validity
Not Before: Jan 31 02:46:21 2025 GMT
Not After : Feb 7 02:46:21 2025 GMT
Subject: CN=679c397e-b8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:78:52:1b:1e:0d:e3:9c:ac:82:c0:d4:54:27:
da:e9:73:60:a6:b3:64:ef:5b:32:24:4b:67:c4:1d:
0a:da:85:ab:78:c4:72:a4:8b:fb:4e:db:97:fe:e7:
fb:bd:18:f2:16:0d:7a:c2:af:85:94:15:8f:3d:a5:
79:55:b8:e1:f5:fb:1b:84:d9:d8:f2:08:f5:71:43:
4d:73:f4:9a:f6:a5:77:d8:e2:9c:9a:a2:e2:99:69:
b0:24:56:be:7f:fc:66:1a:e8:7f:73:28:e7:b1:b5:
9d:2d:b2:44:5a:ce:38:23:2c:2b:03:6d:85:3f:50:
b6:da:40:f8:42:32:1a:82:69:c4:4a:7e:f7:14:29:
25:91:07:7a:1e:d9:92:ec:b5:4a:a3:7a:2f:f1:33:
29:2c:b5:a2:d4:ff:39:b1:a5:e8:b2:6d:55:7f:fa:
ea:b4:20:59:a8:83:c5:3f:02:15:81:3e:bc:a7:68:
8a:0a:d3:79:f5:09:a0:8a:22:a4:e6:20:a6:2b:44:
8d:0f:7c:75:a1:bc:cb:52:fd:51:27:f3:e6:2e:8b:
c4:f8:9d:17:da:bb:2a:5c:c5:36:d4:4d:35:5a:ea:
0a:e2:0e:81:d7:c8:a8:1b:d2:a6:c5:50:7a:b5:c2:
33:e1:ad:89:59:1a:8f:4a:11:0c:c0:e4:ef:68:5b:
2d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:32:F8:ED:C4:90:09:A5:AD:BD:09:3C:16:99:0C:7D:D1:B5:88:C6
X509v3 Authority Key Identifier:
keyid:CA:C3:4D:C5:B8:DD:D3:3B:17:EC:75:5C:95:D4:5D:0F:76:25:0F:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ysNNxbjd0zsX7HVcldRdD3YlD6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B39/B615D0BC7B5A11EDA5E3CA66C4F9AE02/ysNNxbjd0zsX7HVcldRdD3YlD6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:bd:34:2b:8c:65:c8:7c:df:eb:01:eb:17:fe:18:71:96:4e:
e0:d9:b3:58:36:71:fe:98:3a:7e:71:28:ce:b1:0e:5b:3d:37:
2c:68:b2:af:b9:f0:bd:05:97:34:87:d7:0e:94:6e:be:0e:c9:
39:e0:ae:05:13:19:39:5a:79:9c:76:01:42:41:fd:fb:a0:ca:
fd:75:4a:a6:be:3f:28:44:4f:17:7c:b8:8c:26:90:af:2f:e6:
63:2f:e8:33:f8:51:fa:c4:66:63:9f:09:cd:dc:f1:d8:f1:c4:
fd:0e:58:32:d8:a2:42:6f:84:db:db:e7:d4:3e:7f:6d:ad:60:
25:48:a7:86:53:cf:be:cb:0b:e5:e9:22:40:90:05:48:a9:39:
b6:62:06:a2:3b:69:4a:99:eb:ab:e5:30:4e:ec:c8:8b:4c:d8:
9c:59:76:00:61:4a:77:33:c8:85:e9:85:2c:a5:96:0b:bf:e4:
68:ec:f1:3d:06:fb:f7:72:c5:78:3f:77:9d:8d:dd:3e:a7:76:
04:d4:ea:75:c8:66:c4:2c:65:b1:02:78:0b:9f:dc:16:1c:08:
3a:31:40:43:3e:5a:fe:a2:45:c0:8e:32:56:3b:e9:8d:77:a2:
88:ef:1d:ed:1b:54:f4:2b:d4:3a:83:91:20:24:2a:98:ac:72:
96:b8:f6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:41 2025 by rpki-client